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DETAILED ACTION 

This action is in response to the Applicant's Request for Continued Examination 
filed on October 6, 2006. 

Applicant has canceled claims 32, 43, and 44. Claims 1 , 3-7, 10-11,1 3-1 7, 20- 
21, 23-27, 30-31, and 34-42 have been amended. Claims 1-31 and 33-42 are pending 
and herein considered. 



Response to Arguments 

Applicant's arguments filed October 6, 2006 have been fully considered and are 
persuasive. Applicant's amendments to claims 1, 3-7, 10-11, 13-17, 20-21, 23-27, 30- 
31, and 34-42 serve to overcome the previously given 35 U.S.C. § 101, 112, and 102(a) 
Rejections. The newly amended claims comprise allowable subject matter, finding 
clear support In the specifications and containing no new matter. 
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Examiner's Amendment 

An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Kasey Christie on January 19, 2007. 

The application has been amended as follows: 

Please amend claims 1, 11, 21 and 31 in accordance with the Examiner's 
amendments included as pages 3-5 of this office action and entitled "Amendment to 
Claims." 
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Amendment to Claims 

As per claim 1 : 

Please strike the word "substantially" from line 17. 

As per claim 1 1 : 

Please strike the word "substantially" from line 17. 

As per claim 21: 

Please strike the word "substantially" from line 22. 

As per claim 31 : 

Please strike the word "substantially" from line 12. 
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Allowable Subject Matter 

Claims 1-31, and 33-42 are allowed. 

The following is an examiner's statement of reasons for allowance: 
The present invention is directed to a system, method and device for modeling 
an application's potential security threats at a logical component level early in the design 
phase of the application wherein multiple model components are defined to represent 
respective logical elements of the application. Each independent claim identifies the 
uniquely distinct features of in response to user inputs, interconnecting subsets of 
model components to form a logical model of the application and then analyzing those 
mode components to group together similar threats, changing the manner in which the 
components are displayed to the user in response to their particular needs and 
selections. The closest prior art, Nerurkar {''Security Analysis & Design") discloses in a 
computer system, a method for providing application security threat-modeling, the 
method comprising providing class definitions for a plurality of model components to 
represent respective elements of an application. Nowhere does Nerurkar teach 
responsive to user input, selecting particular components of the subset to compare to 
other components in order to change the manner in which the components are 
displayed based upon the user's selection. The prior art, either singularly or in 
combination fails to anticipate or render obvious the present invention and its limitations. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 



Application/Control Number: 09/927,427 Page 6 

Art Unit: 2137 

accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 
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Conclusion 



Any inquiry concerning this comnnunication or earlier comnnunications from tlie 
examiner should be directed to Tamara Teslovich whose telephone number is (571) 
272-4241 . The examiner can normally be reached on Mon-Fri 8-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 703- 
872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Bu^ir^ss Center (EBC) at 866-217-9197 (toll-free). 




